Also look at "man freshclam.conf". I don't see any facility to randomize the check times, as freshclam-sleep provides. That's where a systemd timer would be nice, as it provides a rich set of syntax for random sleeps.